Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          jhT/OTohZAIIfGrcr/ZuP92IGcgbGWW3swGl/NGaw0w=
Subject key identifier:   13:3D:48:ED:3A:CF:0C:1C:B0:A7:FD:57:40:F5:6E:44:CB:27:40:10
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       019D2703D9CBD343BA793C0E5AA07D6428C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          1925
Signing time:             Wed 25 Mar 2026 22:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:56 +0000
Files and hashes:         1: 53U4m7unV2mibWFu1QO-NpnrTnw.roa (hash: 0i1ZcWrwIpK4hLghAwyHvwSPfTHGRkTgHaWZ5gxvSPY=)
                          2: EGceg2KC2veG2ubJ67lLnyLOjtI.roa (hash: wY6zYtQUbn46Y33mgpfT8vGawedlaPHOCiudGF0vIQ4=)
                          3: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: uQnDx83t2riHWFy+QNQKq8wsVVplfiXTEUDmppaEVqE=)
                          4: Mqf6CjvjiOytmfKew5wMIrFMct0.roa (hash: WNuu5876X1n/9Z35upFbegg0OHBkwV/0aP5LxFUgXqw=)
                          5: UuBKTrHp7oCa8BmYah6YqG_WpE4.roa (hash: tTnI66dQzMxv5Ywe6+42iKyT+lMADvw6/O6b+DszdFE=)
                          6: XFzx0VxKKF-e5w2Lr2cCrOGeanM.roa (hash: UP6bd6FhB5DBxfN1nWdp5xVVm3xQKWBg64Qhp36elmc=)
                          7: djutc2DoA1hWRG7fT1m5Cpn9qZU.roa (hash: u5Mvq8ua5/tWNsyrKv37TSv8GaDv2rIuUGdGbP31zlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:d9:cb:d3:43:ba:79:3c:0e:5a:a0:7d:64:28:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Mar 25 22:00:56 2026 GMT
            Not After : Mar 26 22:00:56 2026 GMT
        Subject: CN=133d48ed3acf0c1cb0a7fd5740f56e44cb274010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b4:3c:c2:eb:60:14:ae:75:01:75:4a:17:af:
                    27:4e:df:d2:b2:35:b7:a2:ab:aa:97:c9:ba:94:4a:
                    1a:53:71:e5:43:9e:fa:f8:ec:d2:c3:ff:f5:42:2b:
                    37:81:a5:23:6b:8d:0e:9a:df:69:4d:f4:b1:f2:a8:
                    1f:b4:3c:d1:ac:da:f5:87:cb:8f:e3:9c:45:24:6d:
                    8c:5a:74:2a:c1:53:f9:97:d3:e1:fa:2e:4f:4b:21:
                    93:4e:bb:bc:9f:5a:b9:7c:ba:dc:4b:53:92:8c:02:
                    6b:55:19:ce:83:a1:a4:03:9d:3b:92:1e:ab:a6:73:
                    d1:29:69:b4:3f:cb:3c:5e:6f:e2:2a:3f:55:4c:50:
                    63:03:72:4f:5b:26:2f:61:ab:da:a4:b0:03:2f:9e:
                    ca:60:2e:ca:33:f5:2a:d9:e6:ce:2f:66:9c:f1:86:
                    31:90:91:98:66:c4:26:25:b1:ae:02:1b:f7:c4:e3:
                    db:3b:6f:5f:b8:58:d2:de:53:a8:a4:3d:e8:ec:c8:
                    2a:de:b5:2f:d3:0f:30:5f:64:a7:d1:89:84:f9:8b:
                    5b:2e:fb:d7:13:c9:61:b2:75:d3:5c:2e:bc:b1:27:
                    f7:bb:92:64:f6:ca:5c:c6:ad:91:2f:5b:5f:e2:87:
                    bb:c9:bc:6b:d8:fe:10:82:c9:a4:e7:53:c5:d8:90:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3D:48:ED:3A:CF:0C:1C:B0:A7:FD:57:40:F5:6E:44:CB:27:40:10
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:96:6c:b4:8c:fc:79:c6:e5:5d:0d:13:31:20:c9:ce:7c:
         35:d8:35:06:97:59:69:ee:79:64:98:40:2f:a2:37:76:62:fa:
         88:e1:9c:35:53:3d:b8:89:e8:06:67:d7:c6:af:cf:24:d7:c3:
         8d:2e:bf:48:5e:8b:a1:59:a3:61:02:f4:0c:37:ea:90:a4:e4:
         e4:58:1b:0f:d7:36:3d:96:33:35:1f:12:18:62:12:7b:28:ef:
         54:a1:73:cb:17:eb:77:49:5b:a4:db:97:4a:39:fe:d8:4a:86:
         34:03:5d:47:28:c5:95:38:63:35:3a:33:0b:8e:f9:18:51:aa:
         e8:69:65:35:8c:33:ea:d5:dd:b7:e6:b6:d4:e3:66:ef:25:ee:
         90:14:9f:23:f2:ca:bc:56:0e:e1:3d:e4:fb:0c:01:9b:30:c9:
         65:dd:cc:e3:b2:69:a1:1c:74:f3:6e:09:f1:2c:8b:09:ff:f0:
         1e:6d:39:13:14:73:e2:d3:42:60:32:f6:08:85:0f:d1:b6:0e:
         fd:40:ef:d6:92:87:dd:c6:36:5e:50:08:c7:cc:b4:91:23:d3:
         e2:ba:94:ab:ca:02:c9:15:1c:72:ee:af:33:db:81:37:62:f8:
         66:82:10:9d:61:2d:db:ac:ce:ae:5d:d9:d6:6b:2b:5b:46:fb:
         4e:22:c1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:16 2026 by rpki-client